xtex/home
1
1
Fork 0
Code Activity

Enable Content-Security-Policy for blog
All checks were successful
ci/woodpecker/push/woodpecker.exo Pipeline was successful
Details

Browse source
This commit is contained in:
xtex 2024-04-27 06:51:30 +08:00
parent 9a9a2b83f0
commit bb7cf3b4e8
Signed by: xtex
GPG key ID: B918086ED8045B91
1 changed files with 9 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
Caddyfile
View file

@ -150,6 +150,15 @@ http://blog.xtexx.eu.org http://xtexblog.exozy.me {
header Server xtex-blog
import httpsec
header Content-Security-Policy "
default-src 'self';
base-uri 'self';
frame-ancestors 'none';
form-action 'self';
script-src 'self';
style-src 'self' https://unpkg.com;
object-src 'none';
"
handle_errors {
@404 expression `{err.status_code} == 404`